Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
File:                     3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier:          OYJLxx85R4EIgnS+2UUiK7WF32WFtzxTrQkbDnYuq7w=
Subject key identifier:   3F:73:42:E3:58:B7:86:75:82:8B:D7:B8:D6:0D:5A:B3:B0:1E:6F:CD
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       74D392AEFA89E459BCF15B4A30A0AB8B4EEF7A48
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa
Signing time:             Wed 28 Dec 2022 09:46:15 +0000
ROA not before:           Wed 28 Dec 2022 09:41:15 +0000
ROA not after:            Wed 27 Dec 2023 09:46:15 +0000
asID:                     136787
IP address blocks:        185.225.235.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:92:ae:fa:89:e4:59:bc:f1:5b:4a:30:a0:ab:8b:4e:ef:7a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Dec 28 09:41:15 2022 GMT
            Not After : Dec 27 09:46:15 2023 GMT
        Subject: CN=3F7342E358B78675828BD7B8D60D5AB3B01E6FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:cd:55:4a:d0:75:60:16:31:73:1d:50:99:
                    5d:96:23:69:cd:b2:ad:27:10:4f:f9:16:cd:c3:30:
                    ce:5f:5c:5a:21:4e:33:7e:89:2e:97:e4:53:21:5f:
                    1b:3d:0e:61:fc:7f:c9:7a:c1:84:9e:a2:29:9f:e0:
                    29:84:c1:68:6e:a3:b2:c8:9d:52:48:3d:b4:66:9e:
                    b7:cf:88:d5:90:b7:6d:c3:04:ed:2f:e2:3b:c7:10:
                    d7:bc:e1:c7:80:09:0f:1d:f2:ab:5d:bc:55:33:a9:
                    1b:4f:74:ce:34:bf:e2:33:38:31:d3:51:14:0e:04:
                    5a:f4:3c:52:ee:1d:35:41:06:0f:b4:57:68:b2:cd:
                    df:d2:86:47:1d:b2:4d:9d:cd:8d:09:8b:ad:7e:8f:
                    f1:59:eb:f2:20:50:7c:1e:d7:44:17:3d:cf:3e:8b:
                    90:14:b4:3e:f7:4b:58:1f:0d:f5:91:a5:e2:7e:01:
                    d9:ea:00:d8:27:be:ea:ad:b9:63:ae:11:f8:60:79:
                    e9:5b:78:df:0c:ac:d0:eb:41:1d:58:b3:94:e2:77:
                    6d:15:32:55:bd:c7:db:3b:aa:f3:8e:bf:b6:b2:60:
                    2a:b5:5d:87:14:b7:4f:b6:ff:90:b2:a3:ed:47:e1:
                    9c:7b:85:5d:c6:7d:b7:01:0c:af:d2:1c:9d:b3:b8:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:42:E3:58:B7:86:75:82:8B:D7:B8:D6:0D:5A:B3:B0:1E:6F:CD
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3232352e3233352e302f32342d3332203d3e20313336373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b0:db:28:8d:44:75:9f:1c:fa:28:18:00:29:ec:84:74:3f:
         f9:5b:0d:0d:9b:b8:24:bb:67:90:99:27:da:12:1e:fc:c6:40:
         6b:84:fe:76:95:33:77:f1:96:a1:83:37:aa:94:3c:f4:84:12:
         8d:68:89:88:bc:a1:45:7f:37:d1:64:59:ca:f1:cf:0f:ba:b1:
         54:6d:8d:81:96:55:2c:d4:a7:10:11:b1:e2:6a:88:60:68:bd:
         02:e3:12:3a:36:29:1c:f6:a4:d6:66:19:33:aa:f1:90:5c:73:
         87:90:78:db:36:15:d3:1a:b3:06:e1:eb:10:a0:e3:11:d5:c7:
         3f:3b:2a:30:ba:7c:5a:23:23:e5:1d:da:10:ee:1b:d0:12:70:
         53:0a:20:66:c9:58:e1:12:22:1d:f9:93:62:db:98:ab:a5:25:
         48:fc:ce:fe:96:dd:45:cc:50:10:cf:6e:e8:3c:7b:2e:1e:3b:
         c3:53:8b:52:2b:db:ea:9b:12:29:d3:38:b7:7a:34:1c:da:49:
         85:4b:d1:74:9a:b7:4a:94:07:2c:8d:23:cc:e2:9d:2c:a4:c8:
         b1:f0:69:8c:17:04:1e:d3:df:10:6b:54:9b:fa:32:ce:09:bf:
         31:9d:4d:c6:fc:9f:e2:6e:1e:5f:89:b3:c1:bc:c2:82:5b:38:
         ad:4c:5f:e8
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUdNOSrvqJ5Fm88VtKMKCri07vekgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEyMjgwOTQxMTVaFw0yMzEyMjcwOTQ2MTVaMDMxMTAvBgNV
BAMTKDNGNzM0MkUzNThCNzg2NzU4MjhCRDdCOEQ2MEQ1QUIzQjAxRTZGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkSM1VStB1YBYxcx1QmV2WI2nN
sq0nEE/5Fs3DMM5fXFohTjN+iS6X5FMhXxs9DmH8f8l6wYSeoimf4CmEwWhuo7LI
nVJIPbRmnrfPiNWQt23DBO0v4jvHENe84ceACQ8d8qtdvFUzqRtPdM40v+IzODHT
URQOBFr0PFLuHTVBBg+0V2iyzd/Shkcdsk2dzY0Ji61+j/FZ6/IgUHwe10QXPc8+
i5AUtD73S1gfDfWRpeJ+AdnqANgnvuqtuWOuEfhgeelbeN8MrNDrQR1Ys5Tid20V
MlW9x9s7qvOOv7ayYCq1XYcUt0+2/5Cyo+1H4Zx7hV3GfbcBDK/SHJ2zuPa7AgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUP3NC41i3hnWCi9e41g1as7Aeb80wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuG
cHJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8vVGVycmFUcmFuc2l0
LzYvMzEzODM1MmUzMjMyMzUyZTMyMzMzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2Uy
MDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnh6zANBgkqhkiG9w0BAQsFAAOCAQEA
E7DbKI1EdZ8c+igYACnshHQ/+VsNDZu4JLtnkJkn2hIe/MZAa4T+dpUzd/GWoYM3
qpQ89IQSjWiJiLyhRX830WRZyvHPD7qxVG2NgZZVLNSnEBGx4mqIYGi9AuMSOjYp
HPak1mYZM6rxkFxzh5B42zYV0xqzBuHrEKDjEdXHPzsqMLp8WiMj5R3aEO4b0BJw
UwogZslY4RIiHfmTYtuYq6UlSPzO/pbdRcxQEM9u6Dx7Lh47w1OLUivb6psSKdM4
t3o0HNpJhUvRdJq3SpQHLI0jzOKdLKTIsfBpjBcEHtPfEGtUm/oyzgm/MZ1Nxvyf
4m4eX4mzwbzCgls4rUxf6A==
-----END CERTIFICATE-----